
$ rpki-client -vvf rpki.apnic.net/member_repository/A91164D3/155048EA338911EF99FD1C27C4F9AE02/mWsZb8o8chhx7p4UE5Mri1DtCas.mft
File: mWsZb8o8chhx7p4UE5Mri1DtCas.mft (raw, json)
Hash identifier: XJ1Mk7dW0aziLzWgI7pQEC+ymAx9UVWEUcPGfrL3n9Q=
Subject key identifier: 06:7E:D9:1F:8F:E1:18:43:97:F0:2F:C4:7B:C9:1E:5A:F4:9C:B9:25
Authority key identifier: 99:6B:19:6F:CA:3C:72:18:71:EE:9E:14:13:93:2B:8B:50:ED:09:AB
Certificate issuer: /CN=A91164D3/serialNumber=996B196FCA3C721871EE9E1413932B8B50ED09AB
Certificate serial: 014A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWsZb8o8chhx7p4UE5Mri1DtCas.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91164D3/155048EA338911EF99FD1C27C4F9AE02/mWsZb8o8chhx7p4UE5Mri1DtCas.mft
Manifest number: 0147
Signing time: Wed 25 Mar 2026 04:25:51 +0000
Manifest this update: Wed 25 Mar 2026 04:25:50 +0000
Manifest next update: Wed 01 Apr 2026 04:25:50 +0000
Files and hashes: 1: mWsZb8o8chhx7p4UE5Mri1DtCas.crl (hash: 0ylE+Mxgc1HLEHCxCBttgEIJGcXOW4M03wdLHOYGbGU=)
2: 934F8250338A11EFB9C7A738C4F9AE02.roa (hash: YzfDTQT2HU5tWjIevZns8MtBtBlyBZzvBj6T470nXi8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91164D3/155048EA338911EF99FD1C27C4F9AE02/mWsZb8o8chhx7p4UE5Mri1DtCas.crl
rsync://rpki.apnic.net/member_repository/A91164D3/155048EA338911EF99FD1C27C4F9AE02/mWsZb8o8chhx7p4UE5Mri1DtCas.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWsZb8o8chhx7p4UE5Mri1DtCas.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:25:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 330 (0x14a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91164D3, serialNumber=996B196FCA3C721871EE9E1413932B8B50ED09AB
Validity
Not Before: Mar 25 04:25:50 2026 GMT
Not After : Apr 1 04:25:50 2026 GMT
Subject: CN=69c363cf-cec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a9:80:21:09:5c:cb:b8:9a:83:83:3d:bc:3a:
40:ca:d5:14:7e:e5:ed:e2:55:68:23:d0:a8:ac:a7:
fa:c3:54:7b:9b:2e:4d:9e:c8:95:9e:bd:bf:97:3b:
8d:83:3e:08:d2:6a:ce:5c:48:8a:19:2a:1f:63:17:
44:60:32:a3:2d:e6:de:4a:c9:e8:21:c3:10:fb:5f:
33:fb:c8:e2:a5:a0:57:f8:6c:7c:44:61:bb:6e:da:
20:c2:60:5f:63:be:88:67:a5:61:f5:3d:4c:69:5c:
72:ae:e1:c6:46:96:ef:85:58:9d:d3:34:e3:05:5f:
6a:5f:7c:b5:f3:40:43:45:79:34:61:0b:4a:b3:43:
10:cf:36:a6:e7:9c:82:0a:5b:f5:97:1a:ce:d1:99:
74:07:f0:c9:c9:db:ff:e6:77:f5:36:89:dd:25:9f:
99:b5:1b:ea:7b:5a:e0:ac:c4:ac:01:0f:09:98:64:
05:ba:af:c8:56:ea:16:c2:a9:b0:42:27:29:c7:62:
99:78:a0:97:f3:a5:3f:b1:f3:10:c9:88:97:c5:70:
21:5e:fa:4c:c2:b4:03:d1:4b:6f:00:a6:1e:ff:e0:
f1:bb:8d:ba:85:9a:b1:c0:a4:66:e4:51:bb:ca:b0:
f6:b2:18:5c:b7:43:a5:36:b4:f9:95:c9:53:9d:cf:
db:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:7E:D9:1F:8F:E1:18:43:97:F0:2F:C4:7B:C9:1E:5A:F4:9C:B9:25
X509v3 Authority Key Identifier:
keyid:99:6B:19:6F:CA:3C:72:18:71:EE:9E:14:13:93:2B:8B:50:ED:09:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91164D3/155048EA338911EF99FD1C27C4F9AE02/mWsZb8o8chhx7p4UE5Mri1DtCas.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWsZb8o8chhx7p4UE5Mri1DtCas.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91164D3/155048EA338911EF99FD1C27C4F9AE02/mWsZb8o8chhx7p4UE5Mri1DtCas.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:f2:99:95:3b:96:54:eb:10:c9:66:49:11:b9:ba:24:fd:cd:
cd:3a:4b:2c:2f:fd:82:d8:e5:6f:21:52:81:dc:ab:29:20:33:
c8:03:4c:c9:87:d6:b5:4b:d3:a2:f8:6c:54:61:56:41:7c:da:
77:dd:ab:26:59:ac:22:8e:5b:c5:9a:59:c1:57:b6:74:2d:bf:
19:c8:29:e6:47:2b:28:a3:a2:2b:90:2d:93:cb:0b:91:bf:b1:
7b:28:ba:be:a9:ef:e7:01:1a:3b:f3:22:5a:02:2f:92:92:f9:
3f:4a:40:61:8e:3a:76:0c:af:d2:4a:70:83:55:c6:72:8e:6c:
0c:3b:2c:2b:d8:f2:8c:17:a2:b5:36:c5:54:06:d3:f2:cc:d4:
b7:b7:af:3d:6b:9b:fb:23:cf:2d:67:7b:1a:2b:2d:10:73:09:
57:e6:9a:cf:39:50:2e:82:5f:86:46:24:ac:29:18:fd:89:28:
6a:87:58:fa:2f:67:c9:de:63:95:4b:5c:ae:ad:b0:ad:c1:dd:
32:38:58:82:42:2f:e5:2e:65:3e:f0:1c:c9:ab:49:b3:ab:49:
21:f8:08:94:83:78:7f:a1:f1:a4:5c:e5:fe:27:53:1b:21:ec:
2f:c5:54:e4:3e:f9:68:ad:5f:aa:ba:aa:5e:4d:5b:94:71:f9:
2d:17:97:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:44:11 2026 by rpki-client